CVE-2020-28469

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
Configurations

Configuration 1 (hide)

cpe:2.3:a:gulpjs:glob-parent:*:*:*:*:*:node.js:*:*

Configuration 2 (hide)

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*

History

21 Nov 2024, 05:22

Type Values Removed Values Added
CVSS v2 : 5.0
v3 : 7.5
v2 : 5.0
v3 : 5.3
References () https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9 - Broken Link () https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9 - Broken Link
References () https://github.com/gulpjs/glob-parent/pull/36 - Patch, Third Party Advisory () https://github.com/gulpjs/glob-parent/pull/36 - Patch, Third Party Advisory
References () https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2 - Release Notes, Third Party Advisory () https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2 - Release Notes, Third Party Advisory
References () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093 - Exploit, Third Party Advisory () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093 - Exploit, Third Party Advisory
References () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092 - Exploit, Third Party Advisory () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092 - Exploit, Third Party Advisory
References () https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - Exploit, Third Party Advisory () https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - Exploit, Third Party Advisory
References () https://www.oracle.com/security-alerts/cpujan2022.html - Patch, Third Party Advisory () https://www.oracle.com/security-alerts/cpujan2022.html - Patch, Third Party Advisory

Information

Published : 2021-06-03 16:15

Updated : 2024-11-21 05:22


NVD link : CVE-2020-28469

Mitre link : CVE-2020-28469

CVE.ORG link : CVE-2020-28469


JSON object : View

Products Affected

oracle

  • communications_cloud_native_core_policy

gulpjs

  • glob-parent
CWE
CWE-400

Uncontrolled Resource Consumption